But it is equally fine for people like me to point out that doing so means fewer eyes on the code therefore less security...
...Coinkite locking down their code so it cannot be used by anyone else.
I think these two parts of your post mean totally different things. Please tell me how you or anyone else can't scrutinize the Coldcard code and find issues with it if they exist?
Yes, you can't use the code in your own software, sell it, releases it with such code, etc. Why exactly can't you analyze every line of it if it pleases you?